From 8f1a88708e6eea29e334bc6dcb47ed147028e80e Mon Sep 17 00:00:00 2001 From: Manish Kumar Date: Mon, 10 Aug 2026 00:20:59 -0500 Subject: [PATCH] config: wire bio_agent TES service-account credentials into workbench (#195) Companion to OmniBioAI/omnibioai-workbench#201 -- that PR alone has no effect until this also lands. Same repo-split pattern as #29 (ORCHESTRATOR_MAX_RETRIES). Adds BIO_AGENT_AUTH_URL/BIO_AGENT_SVC_EMAIL/BIO_AGENT_SVC_PASSWORD to the workbench service's environment block, next to the existing LIMS_* vars (same scope -- workbench only, not celery-worker, matching precedent). Real credential values already live in the (gitignored) .env for this deployment; this PR only adds the compose wiring + ${VAR:-} defaults. Co-Authored-By: Claude Sonnet 5 --- docker-compose.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docker-compose.yml b/docker-compose.yml index 2804014..1047018 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -396,6 +396,14 @@ services: LIMS_PASSWORD: ${LIMS_PASSWORD:-omnibioai} LIMS_REFRESH_TOKEN: ${LIMS_REFRESH_TOKEN:-} LIMS_API_TOKEN: "" + # bio_agent -> auth-service TES credential (issue #195): dedicated + # scientist-role service account, same shape as the LIMS_* block + # above. auth-service isn't otherwise wired to workbench, hence the + # explicit URL rather than reusing IAM_URL (that var belongs to + # api-gateway/security-audit's own env blocks, not this service's). + BIO_AGENT_AUTH_URL: "http://auth-service:8001" + BIO_AGENT_SVC_EMAIL: ${BIO_AGENT_SVC_EMAIL:-} + BIO_AGENT_SVC_PASSWORD: ${BIO_AGENT_SVC_PASSWORD:-} SENTRY_DSN: ${SENTRY_DSN:-} SENTRY_ENVIRONMENT: ${SENTRY_ENVIRONMENT:-beta} SENTRY_RELEASE: "0.7.0"